Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier: 4c8Ga2n/WAwqDu6kbkj9s8O22AluCa/BM7y2z4mQEi0=
Subject key identifier: 33:19:7F:41:86:18:19:D8:03:02:9E:AD:77:D8:87:65:38:65:A3:D7
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial: 019E1F7F3F3AB2E85D05D5C9A494101CF020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number: 0856
Signing time: Wed 13 May 2026 04:01:33 +0000
Manifest this update: Wed 13 May 2026 04:01:33 +0000
Manifest next update: Thu 14 May 2026 04:01:33 +0000
Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: mISeOo54Znb6oJ1sb+wABftx7yMdNO0PUHjqwt1wKYM=)
2: eN5E1N2fbNIwZ9RyYdP9j32arcA.roa (hash: Vg/cG2oIlWZ3XVorMkNOVvWySOFv00wWS3oGrbEzxmU=)
3: w9YEoSGGw5FqZxEAWpHoaM4fdnU.roa (hash: +H9ZxdN0LwsnaJ4J/ES/yJYI9G3YZQK2l2602ElBkSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:3f:3a:b2:e8:5d:05:d5:c9:a4:94:10:1c:f0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Validity
Not Before: May 13 04:01:33 2026 GMT
Not After : May 14 04:01:33 2026 GMT
Subject: CN=33197f41861819d803029ead77d887653865a3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a6:22:97:16:31:b8:66:b2:46:fa:5e:4c:d9:
b0:a0:55:23:45:d2:1d:95:94:4d:fd:50:00:87:f1:
2b:69:01:e0:af:bf:d6:f2:8d:dc:11:fe:9c:1b:e5:
3b:bd:af:34:96:cb:2c:f3:5b:10:d5:f3:8d:d5:58:
cd:ad:3c:03:cc:54:a3:54:98:d0:84:54:7c:22:ab:
09:8d:d9:04:21:cc:28:fa:c0:db:87:31:59:40:85:
2b:f3:a2:ac:43:07:3c:43:47:55:6e:ac:e2:55:ad:
18:b2:e7:7b:d3:78:49:3a:2b:ac:e0:ca:d7:31:f1:
45:cc:b9:30:01:3d:4b:ec:1b:51:87:4f:2f:3c:f0:
ab:56:ab:82:f1:05:6e:35:c0:54:e8:c1:50:44:61:
34:20:8d:82:1d:50:17:14:c3:d5:62:92:a7:57:64:
8a:4e:31:65:54:19:3d:2e:58:f4:76:db:17:d1:79:
59:7c:c8:4a:3f:a7:ef:61:97:72:ea:f5:8f:07:fa:
a3:a5:cf:18:21:75:d0:1e:e1:19:7e:5b:0d:c5:8a:
d1:24:6d:c3:b1:14:de:e0:2a:b2:f8:be:26:17:3c:
be:69:6a:48:e8:60:e4:55:37:ea:c6:71:dd:c6:aa:
f5:54:a3:78:34:15:45:5f:f0:c7:4c:5c:c3:64:24:
55:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:19:7F:41:86:18:19:D8:03:02:9E:AD:77:D8:87:65:38:65:A3:D7
X509v3 Authority Key Identifier:
keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:dd:15:56:bb:2e:59:60:9d:82:39:90:8e:3c:5e:79:15:2f:
84:b5:04:e6:c3:98:9a:1b:17:c7:44:45:5c:42:68:30:df:3a:
98:1e:ab:d4:21:d2:4c:c9:d5:b6:70:0d:c3:cd:f9:9e:ea:71:
fe:5e:56:58:ee:13:cb:b6:0b:7d:4a:b2:4b:35:82:ba:2c:62:
d9:6b:b3:28:0c:ef:c0:81:36:7d:50:3d:7e:65:02:68:a4:74:
12:56:25:87:ab:87:a4:d8:d4:b2:6b:54:bd:77:29:0c:cc:ba:
7b:37:ff:3c:73:ff:1a:cb:97:04:4c:c2:97:6e:a9:5d:d7:0a:
14:66:e1:3e:33:61:29:bd:3c:a9:4d:49:11:d2:66:84:24:d0:
03:89:5c:f2:85:85:1e:67:c6:5f:83:6c:d0:02:6e:f9:55:67:
93:db:6d:d3:43:f4:c4:31:4e:75:00:39:17:d1:74:4e:90:fa:
69:47:af:11:92:65:25:d3:39:b9:28:36:08:73:55:fa:5e:64:
64:4e:18:8f:c6:91:32:bc:ee:18:e6:25:c5:a2:54:36:9c:fe:
69:66:54:16:ea:f0:01:7a:ee:81:69:ff:d2:1e:d2:c2:10:b0:
be:50:74:17:c4:8e:33:ce:db:b5:d7:7a:95:90:af:14:11:f1:
8f:cc:b7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:31:56 2026 by rpki-client